Amazon Security Engineer Vulnerability Management Response - Remediation 

United States, Washington, Seattle 

414118668

As a Security Engineer in VMR Remediation, you will play a hands-on role in the proactive identification and remediation of security issues at Amazon. You will be part of a global-scale vulnerability response service supporting a diverse technical ecosystem. Your teammates are an international group of security engineers, software developers, and technical program managers dedicated to continuously raising the security bar.
Key job responsibilities
- You will collaborate with development and engineering teams to ensure any critical vulnerabilities in custom code, applications, or proprietary software are identified and addressed.
- You will coordinate detailed remediation plans, including timelines, responsible stakeholders, and required resources.
- You will work with security teams to ensure identification, accuracy, and response of critical vulnerabilities.
- You use query languages like SQL or scripting languages like Python to manage data from different data sources to develop automation, create dashboards and evaluate metrics.
- You participate in on-call rotations and you are proficient in a range of security design approaches and know when it is appropriate to use them (or not).
- You specialize in two or more security domains (e.g. access control systems and methodology, network security, cloud security, applications and systems development security, security architecture and models, cryptography, or operations security).
- You may evaluate code or develop solutions to remediate exploitable conditions. You may implement software patches to address system vulnerabilities such as malicious code or other type of threats.
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Work/Life BalanceTraining and Career growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

- BS degree in Computer Science, Computer Engineering or related degree; or 5+ years equivalent technology experience
- 3 years hands-on Security Engineering experience, with at least 1 years in vulnerability management.
- 3 years experience building, operating, and maturing large-scale security systems or services.
- 2 years experience automating security operations using programming languages like Java, Python, Ruby, or NodeJS

- 5 years hands-on Security Engineering experience, with at least 3 years in vulnerability management.
- Experience building and troubleshooting cloud-based services.
- Experience with systems design.
- Experience with AWS services.